support changing passwords of users

needs additional work for changing passwords of other users without checking for the old password (use case: admin is asked to change your password)

issue #279